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Amended claims follow. 

I. 



(Currently Amended) A method for management of network access on a per 
application basis, comprising: 

(a) selecting applications from a group of applications adapted for working in 
conjunction with a first application program interface to gain access to a 
network, the first application program interfan. adapted For f v.nr,i>tmp 
applicatio ns to gain access to the network : 

(b) installing a second application program interface adapted for precluding the 
applications from accessing the network; and 

(c) wrapping the selected applications for allowing the selected applications to 
access the network via the second application program interface , where the 
selected applications would otherwis e be nrecL.HpH network ar.r,.« hv th» 
second aa nlication pmp .ram inTPrfn^^ 

2. (Curremly Amended) The method as recited in claim 1 . wherein the selected 
applications are wrapped with a wrapper adapted for compressing data in a 
portable executable (PE) image that provides compression nfd^t. ...^.....a 
with the applications . 

3. (Original) The method as recited in claim 2, wherein the wrapper equips the 
compressed data with extractor code adapted for extracting the data in the PE 
image. 

k (Original) The method as recited in claim 3, wherein the extractor code is 

further adapted for interfacing with the second application program interface. 

(Original) The method as recited in claim 2, wherein the wrapper is further 
adapted for identifying a location in memory. 
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6. (Original) The method as recited in claim 5, wherein the location in memoo' 
is where a routine is stored for allowing the selected applications to access 
the network. 

7. (Original) The method as recited in claim 1 , and further comprising allowing 
a user to select the applications to be allowed to access the network via the 
second application program interlace. 

8. (Currently Amended) A computer program product for management of 
network access on a per application basts, comprising: 

(a) computer code for selecting applications from a group of applications 
adapted for working in conjunction with a first application program interface 
to gain access to a network, the first annliratinn program interface adapted 
for permitting the apDHcati ons to aain access to the network: 

(b) computer code for installing a second application program interface adapted 
for precluding the applications from accessing the network; and 

(c) computer code for wrapping the selected applications for allowing the 
selected applications to access the network via the second application 
program interface, where the setent ed anplicatinns would ntherwu>. 
precluded network ao^^^cc h» tu^ c gcond annlirfltjon program inrerfer.. 

9. (Currently Amended) The computer program product as recited in claim 8. 
wherein the selected applications are wrapped with a wrapper adapted for 
compressing data in a portable executable (PE) image that provides 
compression of data associated with the anplicatinns 

1 0. (Original) The computer program product as recited in claim 9, wherein the 
wrapper equips the compressed data with extractor code adapted for 
extracting the data in the PE image. 

1 1 . (Original) The computer program product as recited in claim 1 0, wherein the 
extractor code is further adapted for interfacing with the second application 
program interface. 
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1 2. (Original) The computer program product as recited in claim 9, wherein the 
wrapper is further adapted for identifying a location in memory. 



13. 



14. 



(Original) The computer program product as recited in claim 12. wherein the 
location in memory Is where a routine is stored for allowing the selected 
applications to access the network. 

(Original) The computer program product as recited in claim 8, and further 
comprising computer code for allowing a user to select the applications to be 
allowed to access the network via the second application program interface. 

15. (Currently Amended) A system for management of network access on a per 
application basis, comprising: 

(a) logic for selecting applications from a group of applications adapted for 
working in conjunction with a first application program interface to gain 
access to a network, the first anplir^fi^n p.^. ^am interfnr,. .w.p t^ f^, 
permitting the annlication.; in p ain acce.« tn rhe network - 

(b) logic for installing a second application program interface adapted for 
precluding the applications from accessing the network; and 

(c) logic for wrapping the selected applications for allowing the selected 
applications to access the network via the second application program 
interfac e, where the selected application..; w o uld otherwice p»..i..H^^ 
network access hy th e second application p mpr^m int^-fo.. 

(Currently Amended) The system as recited in claim 1 5, wherein the selected 
applications are wrapped with a wrapper adapted for compressing data in a 
portable executable (PE) image that provides .nmpr^c.;.. ^r..,. n-nriifn1 

with the aop licationc 



16. 



17. 



(Original) The system as recited in claim 1 6, wherein the wrapper equips the 
compressed data with extractor code adapted for extracting the data in the PE 

image. 
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»8. (Original) The system as ^.cited in claim 17, wherein the extractor code is 

further adapted for interfacing with the second application progn.m interface. 

(OriginaO The system as recited in cJaim 1 6. wherein the wrapper is farther 
adapted for identifying a location in memory. 



J 9. 



20, 



21. 



22. 



(a) 



(b) 



23 
(a) 



(Original) The system as recited in claim 19, wherein the location in memoo' 
- where a routine is stored for allowing the selected applications to access 
the network. 

(Original) The system as recited in claim 15, and further comprising logic for 
allowmg a user to select the applications to be allowed to access the network 
via the second application program interface. 

(Cun^ntly Amended) A system for managemem of network access on a per 
application basis, comprising: 



means for selecting applications from a group of applications adapted for 
workmg in conjunction with a first application program interface to gain 
access to a networkaiiefim application nm^.^ ,^,p^^,., 
perm.ttmg the application. s to g ain acce5i..i tn rh. r,.^..^^ . 
means for installing a second application program interface adapted for 
preclud.ng the applications from accessing the network- and 
(0 means for wrapping the selected applications for allowing the selected 
applications to access the netxvork via the second application program 

■nterfac e. where the selec ted anni;....ne ........ ,„ ^ , 

network access hy rh. ^rrnnd aBBljca tion program inr.rfi... 



(Cunrently Amended) A data strucu,. stored in memory for management of 
network access on a per application basis, comprising- 
application p«,gram interface object for precluding a plurality of applications 
from accessing a network^rein a nermitt.n. .pp....:^, p,,^ 
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(b) 



24 



25. 



26. 



27. 



interface is adapted for permitting the anp lir^rions to eain aer.,.s. tn th^ 
network : and 

a wrapper object for wrapping selected applications for allowing the selected 
applications to access the net>vork via the application program interface 
object, where the selected aoplications would otherwise be preclnriftri 
network access bv the ap plication pm p ram interface nh j^rt 



(Currently Amended) A method for management of network access on a per 
application basis, comprising: 

(a) installing an precludinp a pplication program interface adapted for precluding 
a plurality of applications from accessing a network , wherein a p ermitting 
application program interface is adapt ed for nermitring the aonlicafinn^ t» 
gain acces s to the network - and 

(b) wrapping a plurality of selected applications for allowing the selected 
applications to access the network via the firecluding.application program 
interface , where the selected a ppl ications would other^vise he precluded 
network access hv thfi orecludinp ;.p plication pmp ram interface 



(New) The method as recited in claim 2, wherein the PE image includes a 
header, a stub program, a file signature, a . text section header, a .bss section 
header, a .rdata section header, and a .debug section header. 

(New) The method as recited in claim I, wherein the applications include a 
word processor application, a database program, a browser program, a 
development tool program, a drawing program, an image editing program, 
and a communication program. 

(New) The method as recited in claim 1, wherein the second application 
program interface is adapted for precluding the applications from accessing 
the network utilizing a network card. 
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(New) The method as recited in claim 1, wherein the second application 
program interface includes a modified copy of the first application program 
interface. 

(New) The method as recited in claim 1, wherein the second application 
program interface is separate from the first apphcation program interface. 
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